WHAT IS CLAIMED IS: 

1 . A method of distributing program materials received from a broadcast 
system between a host receiver and a client receiver for remote decryption, comprising: 

(a) receiving an encrypted media encryption key at the host receiver; 

(b) decrypting the encrypted media encryption key at the host receiver; 

(c) re-encrypting the decrypted media encryption key at the host receiver using a 
pairing key; 

(d) transferring the re-encrypted media encryption key from the host receiver to 
the client receiver; 

(e) decrypting the re-encrypted media encryption key at the client receiver using 
the pairing key; 

(f) receiving encrypted program materials from the broadcast system at the host 
receiver; 

(g) transferring the encrypted program materials from the host receiver to the 
client receiver; and 

(h) decrypting the encrypted program materials at the client receiver using the 
decrypted media encryption key. 

2. The method of claim 1, further comprising decrypting the encrypted 
program materials at the host receiver using the decrypted media encryption key. 

3. The method of claim 1, further comprising receiving the pairing key from 
the broadcast system at both the host receiver and the client receiver. 

4. The method of claim 3, wherein the receiving step comprises: 
receiving the pairing key from the broadcast system at the host receiver, wherein 

the pairing key is encrypted; and 

decrypting the pairing key at the host receiver using a receiver key uniquely 
associated with the host receiver. 

5. The method of claim 3, wherein the receiving step comprises: 
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v. 



receiving the pairing key at the client receiver, wherein the pairing key is 
encrypted; and 

decrypting the pairing key at the client receiver using a receiver key uniquely 
associated with the client receiver. 

5 

6. The method of claim 5, further comprising: 

receiving the pairing key from the broadcast system at the host receiver; and 
transferring the pairing key from the host receiver to the client receiver. 

7. An apparatus for distributing program materials received from a broadcast 
system between a host receiver and a client receiver for remote decryption, comprising: 

(a) means for receiving an encrypted media encryption key at the host receiver; 

(b) means for decrypting the encrj^^ted media encryption key at the host receiver; 

(c) means for re-encrypting the decrypted media encryption key at the host 
receiver using a pairing key; 

(d) means for transferring the re-encrypted media encryption key from the host 
receiver to the client receiver; 

(e) means for decrypting the re-encrypted media encryption key at the client 
receiver using the pairing key; 

(f) means for receiving encrypted program materials from the broadcast system at 
the host receiver; 

(g) means for transferring the encrypted program materials from the host receiver 
to the client receiver; and 

(h) means for decrypting the encrypted program materials at the client receiver 
using the decrypted media encryption key. 

8. The apparatus of claim 7, further comprising means for decrypting the 
encrypted program materials at the host receiver using the decrypted media encryption 
key. 
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9. The apparatus of claim 7, further comprising means for receiving the 
pairing key from the broadcast system at both the host receiver and the client receiver. 

1 0. The apparatus of claim 9, wherein the means for receiving comprises: 
means for receiving the pairing key from the broadcast system at the host receiver, 

wherein the pairing key is encrypted; and 

means for decrypting the pairing key at the host receiver using a receiver key 
uniquely associated with the host receiver. 

1 1 . The apparatus of claim 9, wherein the means for receiving comprises: 
means for receiving the pairing key at the client receiver, wherein the pairing key 

is encrypted; and 

means for decrypting the pairing key at the client receiver using a receiver key 
uniquely associated with the client receiver. 

12. The apparatus of claim 1 1, further comprising: 

means for receiving the pairing key from the broadcast system at the host receiver; 

and 

means for transferring the pairing key from the host receiver to the client receiver. 

13. A method of distributing program materials received from a broadcast 
system between a host receiver and a client receiver for remote decryption, comprising: 

(a) receiving an encrypted media encryption key at a conditional access module 
associated with the host receiver; 

(b) decrypting the encrypted media encryption key at the conditional access 
module; 

(c) re-encrypting the decrypted media encryption key at the conditional access 
module using a first pairing key shared between the conditional access module and the 
host receiver; 

(d) transferring the re-encrypted media encryption key from the conditional access 
module to the host receiver; 
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(e) receiving the re-encrypted media encryption key at the host receiver from the 
conditional access module; 

(f) decrypting the re-encrypted media encryption key at the host receiver using the 
first pairing key shared between the conditional access module and host receiver; 

(g) re-encrypting the decrypted media encryption key at the host receiver using a 
second pairing key shared between the host receiver and the client receiver; 

(h) transferring the re-encrypted media encryption key from the host receiver to 
the client receiver; and 

(i) decrypting the re-encrypted media encryption key at the client receiver using 
the second pairing key shared between the host receiver and the client receiver; 

(j) receiving encrypted program materials from the broadcast system at the host 
receiver; 

(k) transferring encrypted program materials from the host receiver to the client 
receiver; and 

(1) decrypting the encrypted program materials at the client receiver using the 
decrypted media encryption key. 

14. The method of claim 13, further comprising decrypting the encrypted 
program materials received from the broadcast system at the host receiver using the 

20 decrypted media encryption key. 

15. The method of claim 13, further comprising receiving the first pairing key 
from the broadcast system at both the host receiver and the conditional access module. 

25 16. The method of claim 15, wherein the receiving step comprises: 

receiving the first pairing key from the broadcast system at the host receiver, 

wherein the first pairing key is encrypted; and 

decrypting the first pairing key at the host receiver using a receiver key uniquely 

associated with the host receiver. 
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1 7. The method of claim 15, wherein the receiving step comprises: 
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receiving the first pairing key from the broadcast system at the conditional access 
module; and 

decrypting the first pairing key at the conditional access module. 

1 8. The method of claim 13, further comprising receiving the second pairing 
key from the broadcast system at both the host receiver and the client receiver. 

19. The method of claim 18, wherein the receiving step comprises: 
receiving the second pairing key from the broadcast system at the host receiver, 

wherein the second pairing key is encrypted; and 

decrypting the second pairing key at the host receiver using a receiver key 
uniquely associated with the host receiver. 

20. The method of claim 18, wherein the receiving step comprises: 
receiving the second pairing key at the client receiver, wherein the second pairing 

key is encrypted; and 

decrypting the second pairing key at the client receiver using a receiver key 
uniquely associated with the client receiver. 

21 . The method of claim 20, further comprising: 

receiving the second pairing key from the broadcast system at the host receiver; 

and 

transferring the second pairing key from the host receiver to the client receiver. 

22. An apparatus for distributing program materials received from a broadcast 
system between a host receiver and a client receiver for remote decryption, comprising: 

(a) means for receiving an encrypted media encryption key at a conditional access 
module associated with the host receiver; 

(b) means for decrypting the encrypted media encryption key at the conditional 
access module; 
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(c) means for re-encrypting the decrypted media encryption key at the conditional 
access module using a first pairing key shared between the conditional access module and 
the host receiver; 

(d) means for transferring the re-encrypted media encryption key from the 
conditional access module to the host receiver; 

(e) means for receiving the re-encrypted media encryption key at the host receiver 
from the conditional access module; 

(f) means for decrypting the re-encrypted media encryption key at the host receiver 
using the first pairing key shared between the conditional access module and host 
receiver; 

(g) means for re-encrypting the decrypted media encryption key at the host 
receiver using a second pairing key shared between the host receiver and the client 
receiver; 

(h) means for transferring the re-encrypted media encryption key from the host 
receiver to the client receiver; and 

(i) means for decrypting the re-encrypted media encryption key at the client 
receiver using the second pairing key shared between the host receiver and the client 
receiver; 

(j) means for receiving encrypted program materials from the broadcast system at 
the host receiver; 

(k) means for transferring encrypted program materials from the host receiver to 
the client receiver; and 

(1) means for decrypting the encrypted program materials at the client receiver 
using the decrypted media encryption key. 

23. The apparatus of claim 22, further comprising means for decrypting the 
encrypted program materials received from the broadcast system at the host receiver using 
the decrypted media encryption key. 
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24. The apparatus of claim 22, further comprising means for receiving the first 
pairing key from the broadcast system at both the host receiver and the conditional access 
module. 

25. The apparatus of claim 24, wherein the means for receiving comprises: 
means for receiving the first pairing key from the broadcast system at the host 

receiver, wherein the first pairing key is encrypted; and 

means for decrypting the first pairing key at the host receiver using a receiver key 
uniquely associated with the host receiver. 

26. The apparatus of claim 24, wherein the means for receiving comprises: 
means for receiving the first pairing key from the broadcast system at the 

conditional access module; and 

means for decrypting the first pairing key at the conditional access module. 

27. The apparatus of claim 22, further comprising means for receiving the 
second pairing key from the broadcast system at both the host receiver and the client 
receiver. 

20 28. The apparatus of claim 27, wherein the means for receiving comprises: 

means for receiving the second pairing key from the broadcast system at the host 
receiver, wherein the second pairing key is encrj^ted; and 

means for decrypting the second pairing key at the host receiver using a receiver 
key uniquely associated with the host receiver. 
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29. The apparatus of claim 27, wherein the means for receiving comprises: 
means for receiving the second pairing key at the client receiver, wherein the 
second pairing key is encrypted; and 

means for decrypting the second pairing key at the client receiver using a receiver 
30 key uniquely associated with the client receiver. 
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30. The apparatus of claim 29, further comprising: 

means for receiving the second pairing key from the broadcast system at the host 
receiver; and 

means for transferring the second pairing key from the host receiver to the client 
5 receiver. 

31. A method of distributing program materials received from a broadcast 
system between a host and client receiver for remote decryption, comprising: 

(a) receiving an encrypted media encryption key at a conditional access module 
1 0 associated with the host receiver; 

(b) decrypting the encrypted media encryption key at the conditional access 
module; 

(c) re-encrypting the decrypted media encryption key at the conditional access 
module using a pairing key shared between the conditional access module and the client 

1 5 receiver; 

(d) transferring the re-encrypted media encryption key from the conditional access 
module to the chent receiver; 

(e) decrypting the re-encrypted media encryption key at the client receiver using 
the pairing key shared between the conditional access module and client receiver; 

20 (f) receiving encrypted program materials from the broadcast system at the host 

receiver; 

(g) transferring encrypted program materials from the host receiver to the client 
receiver; and 

(h) decrypting the encrypted program materials at the client receiver using the 
25 decrypted media encryption key. 

32. The method of claim 3 1 , further comprising receiving the pairing key from 
the broadcast system at both the conditional access module and the client receiver. 

30 33. The method of claim 32, wherein the receiving step comprises: 
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receiving the pairing key from the broadcast system at the conditional access 
module, wherein the pairing key is encrypted; and 

decrypting the pairing key at the conditional access module. 

34. The method of claim 32, wherein the receiving step comprises: 
receiving the pairing key at the client receiver, wherein the pairing key is 

encrypted; and 

decrypting the pairing key at the client receiver using a receiver key uniquely 
associated with the client receiver. 

35. The method of claim 34, further comprising: 
receiving the pairing key at the conditional access module; and 
transferring the pairing key from the conditional access module to the client 

receiver. 

36. The method of claim 31, wherein the transferring step comprises: 
transferring the re-encrypted media encryption key from the conditional access 

module to the host receiver; 

receiving the re-encrypted media encryption key from the conditional access 
module at the host receiver; and 

transferring the re-encrypted media encrypted key from the host receiver to the 
client receiver. 

37. The method of claim 36, further comprising 
25 decrypting the re-encrypted media encryption key at the host receiver using a 

pairing key shared between the conditional access module and the host receiver, wherein 
the pairing key shared between the conditional access module and the host receiver is the 
same as the pairing key shared between the conditional access module and the client 
receiver; and 

30 decrypting the encrypted program materials at the host receiver using the 

decrypted media encryption key. 
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38. An apparatus for distributing program materials received from a broadcast 
system between a host and client receiver for remote decryption, comprising: 

(a) means for receiving an encrypted media encryption key at a conditional access 
module associated with the host receiver; 

(b) means for decrypting the encrypted media encryption key at the conditional 
access module; 

(c) means for re-encrypting the decrypted media encryption key at the conditional 
access module using a pairing key shared between the conditional access module and the 
client receiver; 

(d) means for transferring the re-encrypted media encryption key from the 
conditional access module to the client receiver; 

(e) means for decrypting the re-encrypted media encryption key at the client 
receiver using the pairing key shared between the conditional access module and client 
receiver; 

(f) means for receiving encrypted program materials from the broadcast system at 
the host receiver; 

(g) means for transferring encrypted program materials from the host receiver to 
the client receiver; and 

(h) means for decrypting the encrypted program materials at the client receiver 
using the decrypted media encryption key, 

39. The apparatus of claim 38, further comprising means for receiving the 
pairing key from the broadcast system at both the conditional access module and the client 
receiver. 

40. The apparatus of claim 39, wherein the means for receiving comprises: 
means for receiving the pairing key from the broadcast system at the conditional 

access module, wherein the pairing key is encrypted; and 

means for decrypting the pairing key at the conditional access module. 
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41 . The apparatus of claim 39, wherein the means for receiving comprises: 
means for receiving the pairing key at the client receiver, wherein the pairing key 

is encrypted; and 

means for decrypting the pairing key at the client receiver using a receiver key 
uniquely associated with the client receiver. 

42. The apparatus of claim 41, further comprising: 

means for receiving the pairing key at the conditional access module; and 
means for transferring the pairing key from the conditional access module to the 
client receiver. 

43. The apparatus of claim 38, wherein the means for transferring comprises: 
means for transferring the re-encrypted media encryption key from the conditional 

access module to the host receiver; 

means for receiving the re-encrypted media encryption key from the conditional 
access module at the host receiver; and 

means for transferring the re-encrypted media encrypted key from the host receiver 
to the client receiver. 

44. The apparatus of claim 43, further comprising 

means for decrypting the re-encrypted media encryption key at the host receiver 
using a pairing key shared between the conditional access module and the host receiver, 
wherein the pairing key shared between the conditional access module and the host 
receiver is the same as the pairing key shared between the conditional access module and 
the client receiver; and 

means for decrypting the encrypted program materials at the host receiver using 
the decrypted media encryption key. 
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